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CLAIM AMENDMENTS 

This listing of claims will replace all prior versions and listings of claims in 
the application. 

1. (Currently Amended) A multimedia data processing system, comprising: 
a first integrated circuit, the first integrated circuit comprising: 

a first logic block generating a receiving an encoded multimedia data 
stream; 

a hardware encryption circuit coupled to the first logic block, the 
hardware encryption circuit encrypting the received data stream to generate 
an encrypted data stream with access control : and 

a first Peripheral Component Interconnect Express (PCI-Express) - 
compatible interface circuit supporting data communication over a plurality 
of PCI-Express virtual channels, wherein the plurality of PCI-Express virtual 
channels comprises at least an unencrypted default virtual channel and a 
dedicated encrypted virtual channel, wherein the first PCI-Express- 
compatible interface circuit includes a first plurality of channel interconnects, 
each channel interconnect associated with a virtual channel among the 
plurality of virtual channels, wherein a first channel interconnect among the 
plurality of virtual channels is coupled to the hardware encryption circuit to 
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receive the encrypted data stream, and wherein the first PCI-Express- 
compatible interface circuit communicates the encrypted data stream from 
the hardware encryption circuit over the dedicated encrypted virtual channel; 
a second integrated circuit coupled to the first integrated circuit by a PCI- 
:ess -compatible interconnect, the second integrated circuit comprising: 

a second PCI-Express-compatible interface circuit coupled to the PCI- 
Express-compatible interconnect to receive the encrypted data stream over 
the dedicated encrypted virtual channel, the second PCI-Express-compatible 
interface circuit comprising: 

a second plurality of channel interconnects, each channel 
interconnect associated with a virtual channel among the plurality of 
virtual channels; 

a hardware decryption circuit coupled to a first channel 
interconnect among the second plurality of channel interconnects for 
the second PCI-Express-compatible interface circuit and configured to 
decrypt the encrypted data stream; and 

a second logic block coupled to the hardware decryption circuit 
and configured to use decoding t he decrypted data stream , the 




decoding providing the multimedia stream to a subscriber authorized 
by the access control ; and 
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37 control logic coupled to at least one of the first and second PCI-Express- 

38 compatible interface circuits and configured to communicate authorization data 

39 over the default virtual channel to authorize secure communication between the 

40 first and second integrated circuits over the dedicated encrypted virtual channel, 

41 wherein all data sent over the dedicated encrypted virtual channel are encrypted T 

42 and acces s control - and dccoding - a - ro separately performed on the first and second 

43 integrated circuits for the dedicated encrypted virtual channel , 
i 

i 2-3. (Canceled). 
i 

1 4. (Currently Amended) The circuit arrangement of claim 2 system of claim 1 , 

2 further c o mprising: wherein the first [[a]] logic block coup le d to-the — hardware 

3 encryption circuit and configured to output outputs the multimedia data stream for 

4 communication over the s erial — PCI-Express-compatible interconnect to the 

5 hardware encryption circuit such that the multimedia data output by the logic block 

6 is encrypted prior to communication over the serial— PCI-Express-compatible 

7 interconnect, 
l 

1 5. (Currently Amended) The circuit arrangement system of claim 4, wherein the 

2 first logic block is additionally configured - to - output outputs additional data for 
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3 | communication over an— the unencrypted default virtual channel among the 

4 plurality of virtual channels. 

i 6. (Currently Amended) The circuit arrangement system of claim 4, wherein the 



compatible interconnect solely over the dedicated encrypted virtual channel. 

7. (Currently Amended) The circuit arrangement system of claim 4, further 
comprising: -, wherein the [[a]] second logic block coupled to the multi-channel serial 



4 the unencrypted default virtual channel among the plurality of virtual channels. 

1 8. (Currently Amended) The circuit arrangement system of claim 4, further 

2 compri s in gT wherein the [fall second logic block coupled to the hardware encryption 

3 cireu - it - a - nd configured to output outputs data for communication over the dedicated 

4 encrypted virtual channel. 

1 9. (Currently Amended) The circuit arrangement system of claim 4 } further 

2 comprising: wherein the [fall hardware decryption circuit coupled int - er - mcdiato-the 

3 multi channel oorial intorfaee - ei - reuit and tho logic block, the hardware decryption 



logic block 





mtputs data for communication over an 
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circuit configured to decrypt decrypts encrypted data received from the serial 
interconnect by t he multi channel serial interface ci rc uit - and -communicated over 
the dedicated encrypted virtual channel. 

10. (Currently Amended) The circuit ar rangement system of claim 4, wherein the 
plurality of virtual — channels includes a unencrypted default virtual channel 



authorize secure communication over the dedicated encrypted virtual channel. 



23. (Currently Amended) A method of providing access control for a digital 
multimedia data stream, the method comprising: 

demodulating an encoded multimedia signal to generate a first encrypted 
data stream: 

decrypting the [[a]] first encrypted data stream in a first integrated circuit to 
generate a first decrypted data stream; 

re-encrypting the first decrypted data stream in the first integrated circuit to 
generate a second encrypted data stream; 




mimunicates authorization data 




-to 



11-22. 



(Canceled) 



Application No: 10/539,196 
Attorney Docket No: US02 0617 US 

communicating the second encrypted data stream from the first integrated 
circuit to a second integrated circuit over a multi channel sorial interconnect PCI- 
Express-compatible interface to which the first and second integrated circuits are 
connected by communicating the second encrypted data stream over a dedicated 
encrypted virtual channel, among a plurality of virtual channels , the plurality of 
virtual channels comp rising at least an unencrypted default virtual channel and a 
dedicated e ncr ypted virtual channel supported by the multi channcl -s erial - a PCI- 
Express-compatible interconnect, wherein all data sent over the dedicated 
encrypted virtual channel are encrypted and wherein access control[[,]] and 
decoding are performed separately on the first and second integrated circuits for the 
dedicated encrypted virtual channel; and- 

decrypting the second encrypted data stream in the second integrated circuit 
to generate a second decrypted data stream : and 

decoding the second decrypted data stream to provide the multimedia signal 
to a subscriber authorized by the access control . 



24-25. (Canceled). 

26. (Currently Amended) The method o f claim 24 claim 23 , further comprising: 
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2 performing MPEG decoding on the second decrypted data stream, wherein 

3 | the modulated input multimedia signal comprises a satellite broadcast signal, and 

4 wherein the first encrypted data stream comprises an encrypted MPEG data 

5 stream. 

: 27, (Previously Presented) The method of claim 23, further comprising: 

2 performing regional access control on the first encrypted data stream. 

1 28. (Previously Presented) The method of claim 23, further comprising: 

2 performing subscriber access control on the first encrypted data stream. 

1 29. (Previously Presented) The method of claim 23, further comprising: 

2 disposing the first and second integrated circuits in a set top box. 

1 30. (Previously Presented) The method of claim 23, further comprising: 

2 disposing the first integrated circuit on an access card coupled to the second 

3 integrated circuit via a connector. 

i 31. (Previously Presented) The method of claim 23, further comprising: 
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performing re-encryption of the first decrypted data stream with hardware 
encryption logic disposed on the first integrated circuit. 

32. (Currently Amended) A- eircuit - arrangement receiver circuit , comprising: 

demodulation logic generating a first encrypted data stream from an encoded 
multimedia signal: 

first decryption logic configured to perform access control,, and to decrypt the 
[[a]] first encrypted data stream and to generate a first decrypted data stream, the 
first decryption logic disposed on a first integrated circuit in a processor chip set; 

encryption logic configured to re-encrypt the first decrypted data stream and 
generate therefrom a second encrypted data stream; 

second decryption logic decrypting the second encrypted data stream and 
generating a second decrypted data stream: 

decoder logic on a second integrated circuit in the processor chip set , the 
decoder logic decoding the second decrypted data stream to provide the multimedia 
signal to a subscriber authorized by the access control ; and 

a m - ul - t - i - eha - nnel — s erial — first PCI-Express-compatible interface circuit 
configured to communicato communicating the first and the second encrypted data 
stream over a multi channel — aerial — PCI-Express-compatible interconnect by 
communicating the second encrypted data stream over a dedicated encrypted 
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virtual channel, among a plurality of virtual channels , the plurality of virtual 
channels comprising at least an unencrypted default virtual channel and a 
dedicated encrypted virtual channel, supported by the multi-channel serial 
interconnect, wherein all data sent over the dedicated encrypted virtual channel are 
encrypted^ and- wherein access control[[,]] and decoding are performed separately on 
the first and second integrated circuits for the dedicated encrypted virtual channel. 

33-35. (Canceled). 

36. (Currently Amended) The circuit arrangement of claim 35 receiver circuit of 
claim 32 . wherein the modulated input encoded multimedia signal comprises a 
satellite broadcast signal, wherein the first encrypted data stream comprises an 
encrypted MPEG data stream, and wherein decoding the second decrypted data 
stream in the second integrated circuit comprises performing MPEG decoding on 
the second decrypted data stream. 

37. (Currently Amended) The- &ir -& u - it - a - r - ra - nge - me - nt - of -- elaim - 35 receiver circuit of 
claim 32 , wherein the demodulation logic, the encryption logic, and the mu - l - t - i - 
chann c l serial first PCI-Express-compatible interface circuit are disposed on the 
first integrated circuit, wherein the second decryption logic is disposed on the 
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second integrated circuit, and wherein the second integrated circuit includes a 
second multi channel serial PCI-Express-compatible interface circuit coupled to the 
multi - channel aerial PCI-Express-compatible interconnect to receive the second 
encrypted data stream. 

38. (Currently Amended) The circuit arrangement of claim 32 receiver circuit of 
claim 32 , wherein the first decryption logic performs regional access control on the 
first encrypted data stream. 

39. (Currently Amended) The circuit nrrangoment - of claim 32 receiver circuit of 
claim 32 , wherein the first decryption logic performs subscriber access control on 
the first encrypted data stream. 

40-45. (Canceled) 
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